- dns-wg - mailman.ripe.net

DNSSEC deployed in the e164.arpa (ENUM) zone
by Anand Buddhdev 26 Nov '07

26 Nov '07

Dear Colleagues, Earlier today, the RIPE NCC signed the e164.arpa (ENUM) zone. The Key-Signing Keys (KSKs) for all zones signed by the RIPE NCC, including the e164.arpa zone, are available at the following secure URL: https://www.ripe.net/projects/disi/keys/ripe-ncc-dnssec-keys-new.txt Details of the key maintenance procedure are available at: http://www.ripe.net/rs/enum/key-maint.html If you have any questions, please send an e-mail to <dns-help(a)ripe.net>. Regards, Anand Buddhev DNS Services Manager, RIPE NCC

1 0

Deployment of DNSSEC in the e164.arpa zone
by Anand Buddhdev 20 Nov '07

20 Nov '07

Dear Colleagues, As previously announced, the RIPE NCC will sign the e164.arpa (ENUM) zone on 26 November 2007. Details of the key maintenance procedure are available at: http://www.ripe.net/rs/enum/key-maint.html The Key Signing Key (KSK) will be published on 26 November 2007 at the following secure URL: https://www.ripe.net/projects/disi/keys/ If you have any questions, please send an e-mail to <dns-help(a)ripe.net>. -- Anand Buddhdev, DNS Services Manager, RIPE NCC

1 0

Re: [dns-wg] (off topic) DNS test protocol
by Austin Kinsella 14 Nov '07

14 Nov '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Both this message and the following one repeated the problem, but enabled me to identify it. It is related to the PGP signature, and seems to be occurring when Mail attempts an auto-verification. The hang does not occur if I open the message with no network connection. I will fire up ethereal and see if I can spot what is happening. Thanks for your help. AK At 12:04 on 13 Nov 2007 Patrik Wallstrom wrote: > I signed the message with PGP/MIME, I can send you a test message and > see if we could repeat the problem. > > -- > patrik_wallstrom->foodfight->pawal(a)blipp.com->+46-733173956 __ Austin Kinsella, Lecturer, Networks & Programming, Institute of Technology, Carlow, Ireland. +353 59 9170417 pgp public key is at http://w3.itcarlow.ie/pgpkey.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin) iD8DBQFHObdyYoy2ek64z4cRAvolAKCq8iorc6bY/dnMdgvbQ5eI5eLw0gCgoSYN RS3h3hGYAKqZssDbmvpegQM= =8kqR -----END PGP SIGNATURE-----

3 3

DNS test protocol
by Patrik Wallstrom 13 Nov '07

13 Nov '07

Hi, .SE is currently performing DNS tests of consumer broadband routers as we have had problems with DNSSEC and these types of products (EDNS0 and so on). We have been running a number of tests using the attached test specification. However, we would like to broaden the scope of our tests to include non-DNSSEC specific tests such as unknown RR types. If there are more specific tests regarding ENUM or IPv6 we could do please propose them to me. We assume that AAAA works, but could include that as well. We have also decided to test if the router is an open resolver on the external interface. Please read the test protocol and give me your comments, thanks. Patrik Wallström Project Manager, R&D .SE (Stiftelsen för Internetinfrastruktur) E-mail: patrik.wallstrom(a)iis.se Web: http://www.iis.se/

4 5

Announcement DNS for LIRs Training Courses
by RIPE NCC Training Services 12 Nov '07

12 Nov '07

[Apologies for duplicate e-mails] Dear Colleagues, The RIPE NCC Training Services Department invites you to register for one of our upcoming DNS for LIRs Training Courses: Date: Tuesday 29 January 2008 Time: 09:00-17:00 Location: London, United Kingdom And Date: Wednesday 20 February 2008 Time: 09:00-17:00 Location: Vienna, Austria Hosted by: Nic.at: http://www.nic.at/ The main objective of the DNS for LIRs Training Course is to provide LIRs with information about the different DNS related services the RIPE NCC has available for them. It covers reverse DNS procedures and checks, as well as giving information about DNS Monitoring (DNSMON), K-Root and anycasting. The course also covers DNSSEC and the specific procedures set up by the RIPE NCC to secure the in-addr.arpa zones. Please note that the DNS for LIRs course focuses on DNS services and procedures related to being an LIR. The course does: - NOT teach the basics of DNS - NOT describe how to receive Internet resources from the RIPE NCC - NOT describe fully how to operate a Local Internet Registry (LIR) The course is intended for technical staff of LIRs. It is assumed that all attendees are familiar with common DNS terminology and have a practical knowledge of operating DNS servers. The course is free of charge. We provide lunch and printed training materials. We do not cover any of your travel expenses or accommodation. We give all of our training courses in English. You can find more information about the course at: http://www.ripe.net/training/dns REGISTRATION: ============ To register for this course, please use the LIR Portal or complete the registration via our website on: http://www.ripe.net/cgi-bin/trainingform.pl.cgi If you have any questions please do not hesitate to contact us at <training(a)ripe.net>. Kind regards, Rumy Kanis Training Services Manager RIPE NCC

1 0

v6 DNS testbed for TLD?
by Ruri Hiromi 26 Oct '07

26 Oct '07

Hello, I just join this mailing-list and I am very new to the DNS- WG@ARIN. As I said in my presentation "what can I do for dns grue record?", If we share some test environment/simulator for conformance and stable operation for TLD name servers, will it go a step forward? Or does ARIN community already have such testbed? Regards, ------------------------------- Ruri Hiromi hiromi(a)inetcore.com

1 1

Advisory - L.ROOT-SERVERS.NET changing to 199.7.83.42 on 2007-11-01
by Kim Davies 24 Oct '07

24 Oct '07

Colleagues, This is advance notice that there is a scheduled change to the IP address for one of the authorities listed for the DNS root zone. The change is to L.ROOT-SERVERS.NET, which is administered by ICANN. The new IPv4 address for this authority is: 199.7.83.42 This change is anticipated to be implemented in the root zone on 1 November 2007, however the new address is operational now. It will replace the previous IP address of 198.32.64.12. We encourage operators of DNS infrastructure to update any references to the old IP address, and replace it with the new address. In particular, many DNS resolvers have a DNS root "hints" file. This should be updated with the new IP address. New hints files will be available at the following URLs once the change has been formally executed: ftp://rs.internic.net/domain/db.cache ftp://rs.internic.net/domain/named.cache ftp://rs.internic.net/domain/named.root ftp://ftp.internic.net/domain/db.cache ftp://ftp.internic.net/domain/named.cache ftp://ftp.internic.net/domain/named.root It is expected that the old address will continue to work for at least six months after the transition, but will ultimately be retired from service. With kindest regards, Kim Davies Internet Assigned Numbers Authority

1 0

Finally: first draft for RIPE203bis
by Peter Koch 24 Oct '07

24 Oct '07

Dear DNS WG, there is no real good excuse I could come up with for the long delay, so I won't try. With apologies, please find attached the ASCII version of a first draft document of an update to RIPE-203 "Recommended DNS SOA Values" and a diff to the original(*) version. Changes are a new value for the negative TTL, an explicit hint that the recommended values should not be unconditionally enforced and some editorial updates. Feedback welcome, with one early opportunity during this afternoon's WG session. -Peter (*) the "original" version was based on the text version of an Internet-Draft and thus contains some potentially confusing headers and footers. These were edited away before applying the "diff" function. <ftp://ftp.ripe.net/ripe/docs/ripe-203.txt>

1 0

RIPE-55 coming up -- Agenda's items sought
by Jaap Akkerhuis 18 Oct '07

18 Oct '07

Yes, it is that time of the year. In seven weeks we will have another RIPE meeting. We have the usual two slots. Please provide agenda items or suggestions for such items. Mail them to the list or just to the chairs. Let me remind you that only your contributions can make RIPE meetings to a success. jaap

3 2

DNS Migration document
by Jim Reid 18 Oct '07

18 Oct '07

At long last, there is progress on AP49.1. I have revised the document that Fernando presented to the WG. It's attached below. Comments and feedback are welcome. My hope is that the WG does not discuss the document in detail at next week's meeting. There will probably be some revisions needed -- send text! -- so a line-by-line dissection at RIPE55 will not be productive. Though if that's what the WG wants to do.... IMO it would be better if the WG discussed next week what to do with the document. ie Should sections be added or removed, should it be made less implementation-specific and what should happen to the document once the WG is finished reviewing it. In other words, should it be published as a RIPE document or not and what, if anything, needs to be done to get it to that state. These sorts of things would perhaps be a better focus for discussions next week.

2 2